An Exchange server was compromised with ransomware. Use Splunk to investigate how the attackers compromised the server.

You are involved in an incident response engagement and need to analyze an infected host using Redline